This policy explains what Akash Thakur (“Echo”, “we”) collects when you use the Echo app, why, who else sees it, how long we keep it, and what you can do about it.
It is written to be read, not to be survived. If anything here is unclear, ask us at support@downloadecho.com.
•
Account — your email address or phone number, a username, a display name, and optionally a bio and profile photo.
•
Date of birth — collected once, to confirm you meet our minimum age and to determine whether you are a child under the law that applies to you. It is never shown on your profile and no other user can read it.
•
Content — echoes (posts), comments, reactions, bookmarks, direct messages, and any images or video you upload.
•
Voice — when you use a voice command, the audio you record.
•
Facial images — only if you apply for a verified badge: a pose-challenge selfie, compared against your profile photo.
•
Mini-app data — whatever you put into the tools: habits, tasks, notes and expenses.
•
Body and health data — weight, measurements, meals, water and workouts from the Fitness tool. This is kept on your device only unless you allow us to back it up; we ask the first time you save it.
•
Marketplace listings — items you list, their prices and photos.
•
iOS waiting list — if you ask us on downloadecho.com to tell you when the iPhone app is ready, your email address, and nothing else. It is used for that one message and is not linked to any account, not used for any other mailing, and not shared. Tell us at support@downloadecho.com and we delete it; we delete it ourselves once the iPhone app has shipped.
•
Interest and taste signals — mathematical representations (embeddings) of the content you write and engage with, used to rank your feed and find related posts.
•
Usage signals — what you opened and when, for the features you have enabled.
•
Notification timing — the hours you usually open Echo and the part of the app you use most, so reminders arrive when you are likely to want them. This is on by default; turn it off in Settings → Privacy → Personalized Notifications and we delete it. Your first personalized notification also tells you where that switch is.
We collect automatically:
•
Technical data — device model, operating system version, app version, IP address and coarse timing, for delivery, security and abuse prevention.
•
Crash diagnostics — stack traces and breadcrumbs when the app fails.
•
Product analytics — only if you opt in. Analytics is off until you accept it.
2. What we do not collect
We do not collect precise GPS location, calendar, health data from Apple Health or Google Fit, or advertising identifiers. We do not track you across other apps or websites, and we do not buy data about you.
Contacts. On Android, Echo asks for contacts permission for one purpose: to put its own entry in your address book, so that “Message on Echo” appears on a contact card the way it does for other messaging apps. Echo does not read your contacts, does not upload them, and does not use them to suggest people to follow. The permission covers reading too, because the component that writes Echo’s entry has to check whether it is already there before adding it again.
3. Why we use it, and on what legal basis
Account, content, messaging
To provide the service you asked for
Age assurance and child protection
Legal obligation; legitimate interests
Feed ranking and recommendations
To show you relevant content
Legitimate interests — you can switch to the Latest feed
Personalized notification timing
To send reminders at hours you are usually around
Legitimate interests — on by default, off in one tap (Settings → Privacy)
To answer you and act on your instruction
Consent — asked before first use
To confirm a verified badge is a real person
Consent — you choose to apply
Sync across your devices, and coaching
Explicit consent — asked before anything is uploaded
To carry out what you said
Consent — you choose to speak
Legitimate interests; never for under-18s
To understand what to improve
To keep the network usable and lawful
Legal obligation; legitimate interests
Where we rely on consent you can withdraw it at any time; that does not affect processing that already happened.
4. AI features, and what leaves the app
Echo’s assistant, voice commands, interface translation, content-moderation classification and recommendations are powered by Google Gemini. Requests go to Google directly; OpenRouter carries them only if Google’s service is unavailable.
We ask before the first time. The first time you use the assistant, a voice command, a rewrite or coaching, Echo tells you your input will go to Google and asks your permission. Nothing is sent if you decline, and you can change your answer in Settings → Privacy.
When you use these features the relevant input leaves Echo’s systems:
Your message and recent conversation context
The interface strings, not your content
Text you are about to publish
Your profile photo and your pose-challenge selfie
Your content, to produce embeddings
The text you ask to rewrite; your mini-app entries for coaching
Your public posts, to summarise how you write
We do not sell your data. We use Google’s paid Gemini API, under which Google does not use your inputs or its responses to improve its products. Providers may retain inputs briefly for abuse monitoring under their own terms.
Please do not put passwords, payment details or government identifiers into AI prompts.
Face verification. Your selfie is used for one purpose — confirming you are a real, living person who matches your profile photo — and is deleted as soon as a decision is made, whether you are approved or not. If your jurisdiction treats facial images as sensitive or biometric data, this processing happens only because you chose to apply for a badge, and you can decline without losing any other feature.
Echo ranks your feed using your follows, your engagement and the interest signals described in §1. You can switch to Latest for a purely chronological feed at any time. We do not make decisions about you that produce legal or similarly significant effects.
Echo shows advertising in the feed. It is first-party: we sell placements ourselves and no third-party advertising network operates inside the app. Advertisers do not receive your personal data — they get aggregate counts of views and clicks.
We do not show advertising to anyone under 18, and we do not profile them for it.
7. Who else processes your data
Database, authentication, realtime
Media storage (R2) and the upload edge
Generates AI output; receives AI inputs directly
Fallback route for AI requests when Google is unavailable
Payments for advertising purchases
Subscription entitlements
App distribution, in-app purchases, push delivery
Builds and over-the-air updates
Product analytics — only if you opted in
Each is bound to use your data only to provide their service to us.
8. Where your data lives, and when it crosses a border
Your account, content and messages are stored in Japan. Uploaded media is stored on Cloudflare’s global network. AI processing, crash diagnostics and analytics happen in the United States.
This means your data crosses borders. Where the law requires a transfer mechanism, we rely on the appropriate one — including Standard Contractual Clauses for transfers out of the EU and UK.
Until you delete your account
Posts, comments, reactions
Until you delete them, or your account
Until both participants delete their accounts
Deleted with the owning content or the account
Until you delete your account
Deleted the moment a decision is made
Not retained after the command is carried out
Until you delete the conversation, or your account
Until you disable push, or delete your account
Deleted within 30 days of an account-deletion request
Backups roll off within 30 days.
10. Deleting your account
Settings → Danger Zone → Delete Account. This removes your profile, posts, comments, reactions, bookmarks, direct messages, AI history, mini-app data, push tokens and authentication record — and every file you have uploaded, including avatars, post images, message attachments and marketplace photos.
We keep only what we are legally required to keep, and content others have already lawfully re-shared cannot be recalled.
Echo is for adults. You must be at least 18 to use it. We ask for your date of birth at sign-up and enforce the minimum on our servers. India’s Digital Personal Data Protection Act, 2023 treats anyone under 18 as a child whose data may be processed only with verifiable parental consent; we do not collect that consent, so we do not admit anyone under 18.
If you believe someone under 18 has an account, tell us at support@downloadecho.com and we will close it and delete its data. Our Child Safety Standards (Settings → About) explain how we handle child sexual abuse and exploitation.
Wherever you live you can, in the app: edit your profile, delete any post, comment or message, clear your AI history, turn analytics off, turn personalised notifications off, withdraw AI consent, stop backing up health data (which deletes our copy), and delete your account.
Depending on your jurisdiction you also have rights to access, correct, erase, restrict, port or object to processing, and to withdraw consent. Under India’s DPDP Act you additionally have the right to nominate someone to exercise your rights if you die or become incapacitated, and the right to a grievance redressal process.
We do not sell or share personal information as those terms are defined under the CCPA/CPRA.
To exercise a right, email privacy@downloadecho.com with “Privacy request” in the subject. We respond within the period the applicable law requires. You may also complain to your data-protection authority.
13. Grievance redressal (India)
Grievance Officer: Akash Thakur
Email: grievance@downloadecho.com
Address: Shankar Nagar, Hoshiarpur, Punjab 146001, India
We acknowledge complaints within 24 hours and resolve them within 7 days. Complaints asking us to remove unlawful content are resolved within 36 hours. Where content shows you nude or in a sexual act, impersonates you, or is an altered or morphed image of you, we act within 2 hours of your complaint: report it in the app as Intimate images of me shared without consent or Impersonation, and the post is hidden immediately while we review it. Lawful orders from a court or the appropriate Government are acted on within 3 hours.
All traffic uses HTTPS. Row-level security in the database restricts every query to the rows you are allowed to see, and private message attachments are served only to participants in that conversation. Sign-in is passwordless by default — a one-time code sent to your verified email or phone.
One-to-one messages can be end-to-end encrypted. When you and the person you are talking to both use a current version of Echo, text messages, shared links, contacts and shared Echoes are encrypted on your device with keys that never leave it. Echo cannot read them, and cannot hand them to anyone. A lock appears on every message that is end-to-end encrypted, and in the conversation header.
This does not cover: photos and voice messages, group chats, messages sent before this feature, or messages to someone on an older version of the app. Those are encrypted in transit and at rest with keys Echo holds, so Echo can technically access them. Who you message, when, and how often is also visible to Echo. If you report an end-to-end encrypted message, your device sends that message and up to five messages before it to our moderators; nothing else in the conversation is disclosed.
No system is perfectly secure. If you think your account is compromised, email support@downloadecho.com and we will revoke active sessions.
Theme, accent colour, font size, onboarding state, cached translations and your analytics choice are stored on your device. They are not cookies, they never leave the device, and uninstalling clears them.
16. EU Digital Services Act
If you report content we tell you the outcome (Settings → My Reports), and you can appeal a moderation decision for human review (Settings → Appeals, Art. 20). Our recommender system and the option of a non-personalised Latest feed are described in §5. Contact dsa@downloadecho.com.
This policy is published in English and other languages, including languages listed in the Eighth Schedule to the Constitution of India. The English version is authoritative; translations are for your convenience.
We may update this policy. For material changes we will tell you in the app and update the version and date above, and where the law requires it we will ask for your consent again.
Privacy and data rights: privacy@downloadecho.com
General: support@downloadecho.com
Grievances (India): grievance@downloadecho.com
EU Digital Services Act: dsa@downloadecho.com
Akash Thakur
Shankar Nagar, Hoshiarpur, Punjab 146001, India